Rise Company
07-09-2023, 15:48
فايروول CSF Firewall حل مشكلة cc_ignore is not working توقف عمل Country Code Geoip
حل مشكلة DB-IP, ipdeny.com, iptoasn.com والبديل MaxMind
https://www.rise.company/upload/uploads/169409388065991.png
Country Code Lists and Settings
Country Code to CIDR allow/deny. In the following options you can allow or
deny whole country CIDR ranges. The CIDR blocks are obtained from a selected
source below. They also display Country Code Country and City for reported IP
addresses and lookups
There are a number of sources for these databases, before utilising them you
need to visit each site and ensure you abide by their license provisions
where stated:
1. MaxMind
MaxMind GeoLite2 Country/City and ASN databases at:
https://dev.MaxMind.com/geoip/geoip2/geolite2/
This feature relies entirely on that service being available
Advantages: This is a one stop shop for all of the databases required for
these features. They provide a consistent dataset for blocking and reporting
purposes
Disadvantages: MaxMind require a license key to download their databases.
This is free of charge, but requires the user to create an account on their
website to generate the required key:
WARNING: As of 2019-12-29, MaxMind REQUIRES you to create an account on their
site and to generate a license key to use their databases. See:
https://www.maxmind.com/en/geolite2/signup
https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases/
You MUST set the following to continue using the IP lookup features of csf,
otherwise an error will be generated and the features will not work.
Alternatively set CC_SRC below to a different provider
2. DB-IP, ipdeny.com, iptoasn.com
Advantages: The ipdeny.com databases form CC blocking are better optimised
and so are quicker to process and create fewer iptables entries. All of these
databases are free to download without requiring login or key
Disadvantages: Multiple sources mean that any one of the three could
interrupt the provision of these features. It may also mean that there are
inconsistences between them
https://db-ip.com/db/lite.php
http://ipdeny.com/
https://iptoasn.com/
http://download.geonames.org/export/dump/readme.txt
Set the following to your preferred source:
"1" - MaxMind
"2" - db-ip, ipdeny, iptoasn
The default is "2" on new installations of csf, or set to "1" to use the
MaxMind databases after obtaining a license key
------------------------------
الافتراضى يكون الفايروول على نظام رقم 2 الا وهو db-ip, ipdeny, iptoasn
لكن حدثت مشكلة فى قاعدة البيانات الخاصة بهم جعلت CC_IGNORE لا تعمل مع الدول التى تم اضافتها
وبالتالى هيصل لك ايميلات دائما من الفايروول من الدول المضافة او الغير مضافة داخل CC_IGNORE
https://www.rise.company/upload/uploads/169409400047361.png
This Country Code list will prevent lfd from blocking IP address hits for the
listed CC's
CC_LOOKUPS must be enabled to use this option
https://www.rise.company/upload/uploads/169409388065991.png
حل المشكلة :
استخدم MaxMind رقم 1 بدل من النظام رقم 2 db-ip, ipdeny, iptoasn
لكن يجب الدخول على الموقع الخاص بهم وتسجيل حساب وتوليد License Key
ووضعه داخل MM_LICENSE_KEY ثم ضع رقم 1 فى CC_SRC
https://www.rise.company/upload/uploads/169409437201611.png
استخدام قواعد بيانات MaxMind نظن انه افضل واكثر دقه وبالطبع هو الاشهر عالميا
لذلك ننصح به.
حل مشكلة DB-IP, ipdeny.com, iptoasn.com والبديل MaxMind
https://www.rise.company/upload/uploads/169409388065991.png
Country Code Lists and Settings
Country Code to CIDR allow/deny. In the following options you can allow or
deny whole country CIDR ranges. The CIDR blocks are obtained from a selected
source below. They also display Country Code Country and City for reported IP
addresses and lookups
There are a number of sources for these databases, before utilising them you
need to visit each site and ensure you abide by their license provisions
where stated:
1. MaxMind
MaxMind GeoLite2 Country/City and ASN databases at:
https://dev.MaxMind.com/geoip/geoip2/geolite2/
This feature relies entirely on that service being available
Advantages: This is a one stop shop for all of the databases required for
these features. They provide a consistent dataset for blocking and reporting
purposes
Disadvantages: MaxMind require a license key to download their databases.
This is free of charge, but requires the user to create an account on their
website to generate the required key:
WARNING: As of 2019-12-29, MaxMind REQUIRES you to create an account on their
site and to generate a license key to use their databases. See:
https://www.maxmind.com/en/geolite2/signup
https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases/
You MUST set the following to continue using the IP lookup features of csf,
otherwise an error will be generated and the features will not work.
Alternatively set CC_SRC below to a different provider
2. DB-IP, ipdeny.com, iptoasn.com
Advantages: The ipdeny.com databases form CC blocking are better optimised
and so are quicker to process and create fewer iptables entries. All of these
databases are free to download without requiring login or key
Disadvantages: Multiple sources mean that any one of the three could
interrupt the provision of these features. It may also mean that there are
inconsistences between them
https://db-ip.com/db/lite.php
http://ipdeny.com/
https://iptoasn.com/
http://download.geonames.org/export/dump/readme.txt
Set the following to your preferred source:
"1" - MaxMind
"2" - db-ip, ipdeny, iptoasn
The default is "2" on new installations of csf, or set to "1" to use the
MaxMind databases after obtaining a license key
------------------------------
الافتراضى يكون الفايروول على نظام رقم 2 الا وهو db-ip, ipdeny, iptoasn
لكن حدثت مشكلة فى قاعدة البيانات الخاصة بهم جعلت CC_IGNORE لا تعمل مع الدول التى تم اضافتها
وبالتالى هيصل لك ايميلات دائما من الفايروول من الدول المضافة او الغير مضافة داخل CC_IGNORE
https://www.rise.company/upload/uploads/169409400047361.png
This Country Code list will prevent lfd from blocking IP address hits for the
listed CC's
CC_LOOKUPS must be enabled to use this option
https://www.rise.company/upload/uploads/169409388065991.png
حل المشكلة :
استخدم MaxMind رقم 1 بدل من النظام رقم 2 db-ip, ipdeny, iptoasn
لكن يجب الدخول على الموقع الخاص بهم وتسجيل حساب وتوليد License Key
ووضعه داخل MM_LICENSE_KEY ثم ضع رقم 1 فى CC_SRC
https://www.rise.company/upload/uploads/169409437201611.png
استخدام قواعد بيانات MaxMind نظن انه افضل واكثر دقه وبالطبع هو الاشهر عالميا
لذلك ننصح به.